Privacy & security

What we keep

No ads, no analytics, no tracking cookies. Reading this site takes no account at all. What it knows about you is what you hand it by signing in with Discord: a name, an avatar, and whatever you then write, draw or edit. Here's all of it.

Last updated 5 October 2026

Just browsing

The site sets no cookies and runs no analytics or ad scripts. It remembers a few things in your own browser's storage, which never leaves your device on its own:

Editors also get these, and nobody else:

A few other places see your visit the way any website's would, getting your IP address and browser details with the request:

• Our host, which serves the pages and may keep ordinary server logs.
• A.S.T.R.O., the Discord bot that keeps the wiki, the gallery and the comments. The wiki's pages are a frame that loads its entries from the bot, so reading an entry asks it. Those requests carry nothing about you unless you're signed in.
• Google Fonts, for the default typeface. The other font sets load from this site itself.
• Discord's image servers, for avatars.
• YouTube, only on a page whose author put a video in it. It plays from youtube-nocookie.com, which doesn't set tracking cookies until you press play.

Signing in with Discord

Signing in is optional and is only for what needs to know who you are: editing, commenting, and your own account page.

• We ask Discord for the identify scope only. That gets your Discord ID, name and avatar. Not your email, your servers, your messages or your friends.
• Discord's own token is revoked the moment A.S.T.R.O. has your ID. We don't hold on to it.
• You get a sign-in key, kept in your browser. It's sent as a header, never a cookie, so another site can't use it behind your back.
• A.S.T.R.O. stores only a hash of that key, not the key itself, so a leak of the bot's files wouldn't let anyone sign in as you.
• A sign-in lasts 30 days, and only members of the S.O.F.T. Discord get one. It stops working within about 5 minutes of leaving that server.
• This site's key is its own. Signing in here doesn't sign you in on softaintit.com, or the other way round, though both are run by the same bot.
• Signed in, your display options (theme, motion, easy read, compact, wide and font set) are kept on A.S.T.R.O. too, with your Discord ID, so they follow you to any browser you sign in on.
• Your account page shows you your Discord roles and dates, your wiki and gallery work, your drafts and your comments. Only you see it.

The wiki & gallery

Only editors and the owner write to the wiki and the gallery, and they have to be signed in. Reading is open to everyone.

• An entry or artwork keeps its revision history: who changed it, when, and what it said before, so a bad edit can be rolled back. The author is your Discord ID and the display name you had then.
• Drafts are only seen by editors and the owner until the owner publishes them. They're listed on your account page, and on the wiki's drafts page for other editors.
• Pictures you upload (entry images, icons, gallery art and the thumbnails made in your browser) are kept on A.S.T.R.O.'s machine and are public once what they're on is published. A picture nothing uses any more is cleaned up.
• Face and thing boxes on gallery art are labels of who or what is in a picture. They link to wiki entries, and say nothing about the real people who drew the art, beyond the credit an editor chooses to write.
• The homepage's words and picture are kept the same way, and only the owner changes them.

Comments

You need to be signed in, and a member of the S.O.F.T. Discord, to comment on a published wiki entry or a piece of gallery art.

• What you write is kept on A.S.T.R.O.'s machine with your Discord ID, your display name and avatar as they were, and when. These comments are kept apart from softaintit.com's: a thread on one site never shows on the other. Edit or delete your own any time; a deleted comment is gone, unless someone answered it, in which case a gap stays.
• @mentions: typing @ suggests server members by display name and avatar, to signed-in members only. Whoever you name is told in their bell. Members who've asked to be hidden can't be named.
• Notifications (the bell) are kept per member: replies to you, @mentions of you, new comments where you're following, and anything a moderator did about yours. The bell is shared with softaintit.com, so it shows both sites' notices. Unfollow a thread to stop its new comments ringing.
• Reports go to the moderators (the wiki's editors and its owner) with who sent them. The person reported never learns who reported them.
• When a moderator takes a comment down, its words stay where moderators can see them (so it can be put back), and you're told why. Mutes say how long and why.
• The mod log: new comments, edits and deletes may be posted in a moderators' channel in Discord, so they can keep an eye on things.

What's public on the site

Anyone can see these without signing in:

• Published wiki entries and gallery art, with everything on them: text, pictures, tags, boxes and comments.
• Each comment's author, as a display name and avatar.
• The status page: whether A.S.T.R.O. is up. Nothing in it is about people.
• The homepage, with its words, picture and what's new.

Raw Discord IDs aren't sent, though avatar links contain them, the same as anywhere Discord shows your avatar. Drafts, the bell, your account page, the moderators' tools and your display options are never public. Want your name and avatar off the public pages? Ask the owner.

Security

• Everything is served over HTTPS, the site and A.S.T.R.O.'s API alike.
• No cookies means there's no session for another site to ride along on.
• Who may edit is decided on A.S.T.R.O., every time, not by this page. Being signed in isn't enough by itself.
• Wiki text can't carry scripts: A.S.T.R.O. only keeps the blocks and formatting it knows. Pictures are checked on the way up, and an uploaded SVG is redrawn as a PNG in your browser first, never kept as SVG.
• After signing in you're only ever sent back to a page on this site, never somewhere a link told it to go.
• Refusals and errors come back as plain messages. Never internal details.

Found a problem?

If you spot a security hole, please tell the owner directly, by DM on Discord, rather than posting it in a public channel. We'll thank you and fix it.

Your choices

• Sign out from the account menu. The key is forgotten here and cancelled on A.S.T.R.O.
• Sign out everywhere from your account cancels every browser's sign-in at once.
• Clear this site's data in your browser to forget the display settings and editor backups too. Signed in, Back to the defaults resets the copy on your account as well.
• Edit or delete your comments yourself, any time.
• Ask to be hidden or deleted: the owner can hide you from public pages or remove what A.S.T.R.O. holds about you. Ask if you want something of yours gone.

Red Husky Studios is one person's site, not a company. We keep what we need to run the wiki, the gallery and the comments, and nothing gets sold or shared.